UMA Implementations

This page gathers information about implementation efforts and i=
nterest, along with interoperability testing plans. Maciej Machulak is=
the UMA group's implementation coordinator. Key existing implementations t=
hat we know about are noted below, in alphabetical order of the project or =
organization.

MITREid Connect

RedHat KeyCloak

RedHat's KeyCloak authorization services offering includes partial=
=
UMA1 support, and the project is working on including full UMA2 support=
as of June 2017.

SMART pr=
oject (non-healthcare-related)

This older Java implementation includes an UMA/j&n=
bsp;framework and sample applications. See the SMART blog. The OAuth portion, originally named leeloo, was co=
ntributed to Apache Amber (now Apache Oltu, which is going to include OpenID C=
onnect and good JWT support too). Part the SMART project involves developme=
nt of set of open-source Python libraries, called Puma, for UMA-enabling web apps to become UMA resource =
servers and clients. Note that this SMART project is distinct from the S=
MART health IT initiative.

Synergetics

The company Cloud Identity Limited (since acquire=
d by Synergetics) developed an UMA Authorization Server -&nbs=
p;NuveAM (Online Demo). NuveAM&nb=
sp;implements the UMA protocol and supports other open standards including =
OAuth 2.0, OpenID Connect, and SAML 2.0. The company also developed Java and Python SDKs. More =
information is on the company's website and the company's YouTube channel. T=
he company integrated UMA with its NuveLo=
gin service to simplify the flow for Resource Server and Client ap=
plications.